Machine Assisted Proof of ARMv7 Instruction Level Isolation Properties

Khakpour, Narges and Schwarz, Oliver and Dam, Mads (2013) Machine Assisted Proof of ARMv7 Instruction Level Isolation Properties. In: Certified Programs and Proofs (CPP), 11-13 December 2013, Melbourne, VIC, Australia.

PDF (Author version of "Machine Assisted Proof of ARMv7 Instruction Level Isolation Properties") - Accepted Version

Official URL:


In this paper, we formally verify security properties of the ARMv7 Instruction Set Architecture (ISA) for user mode executions. To obtain guarantees that arbitrary (and unknown) user processes are able to run isolated from privileged software and other user processes, instruction level noninterference and integrity properties are provided, along with proofs that transitions to privileged modes can only occur in a controlled manner. This work establishes a main requirement for operating system and hypervisor verification, as demonstrated for the PROSPER separation kernel. The proof is performed in the HOL4 theorem prover, taking the Cambridge model of ARM as basis. To this end, a proof tool has been developed, which assists the verification of relational state predicates semi-automatically.

Item Type:Conference or Workshop Item (Paper)
Additional Information:This is the author version of the correspondent paper published in the proceedings of Certified Programs and Proofs 2013 (CPP; editors: G. Gonthier and M. Norrish), Springer LNCS 8307. The publisher is Springer International Publishing Switzerland . The final publication is available at
Uncontrolled Keywords:ARM instruction set, noninterference, user mode execution, kernel security, theorem proving
ID Code:5614
Deposited By:Oliver Schwarz
Deposited On:17 Dec 2013 14:19
Last Modified:17 Dec 2013 14:19

Repository Staff Only: item control page